policycoreutils vulnerabilities

CVEs whose affected-version data names the policycoreutils package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-19079Medium· 4.4

3mo ago

Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation

A TOCTOU (Time-of-Check-Time-of-Use) race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script used find and chcon commands to locate and relabel unlab…

▾ SunlitRed Hat · policycoreutils-mainEPSS 0.11%via CVEORG